CVE-2002-1917
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.
Scoring
- CVSS base score
- 0.02
- EPSS probability
- 0.39%
- Published
- 2005-06-28
- Last modified
- 2026-03-16
Affected products
- n/a n/a